r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17905
Expires: Fri, 02 Dec 2022 13:51:58 GMT
Date: Fri, 02 Dec 2022 08:53:33 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4296
Cache-Control: max-age=96555
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:33 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:42:48 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14818
Expires: Fri, 02 Dec 2022 13:00:31 GMT
Date: Fri, 02 Dec 2022 08:53:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 08:19:54 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2019
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +vfdhDeiwrdz9OsSjtejUoWQZM4Or2bxUhT8iV/vpXUOeVPdUgdXH8wAQ7YZX1fgrOGRRZUVA8H2jMyYSwtDGA==
x-amz-request-id: G9TPNSYFXFVRH5J8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 08:46:38 GMT
age: 415
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 08:08:57 GMT
cache-control: public,max-age=3600
age: 2676
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4289
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:34 GMT
Last-Modified: Fri, 02 Dec 2022 07:42:05 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
pvtltdregistration.com/
301 Moved Permanently 0 B IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 08:53:32 GMT
Server: Apache
X-Redirect-By: WordPress
Location: https://www.pvtltdregistration.com/
Content-Length: 0
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: aCwtN04s7YfYfYncqVf6pg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8BR11jsNuV8OCKis1PVJCc9WNsM=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16408
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:53:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16408
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:53:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16408
Expires: Fri, 02 Dec 2022 13:27:03 GMT
Date: Fri, 02 Dec 2022 08:53:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 39819
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 10367
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d08081e2dd562ef50e4e98ebc0136698
b5118bca37feda2ada3001199dc1d80ac6d2aacc
5160333e0cfd338b3887972d0a5c0f817ef88b70b7eb78e4e25d153a85e3478f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F937deb9c-e12c-486f-bf82-4833aed00836.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11443
x-amzn-requestid: 21469d81-ee4b-47f3-8877-b6658b3ea8b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfHDHE4zoAMFvfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891ee0-5b39eddd703ea04e6a1355f8;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:38:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nPuZoyOu_QAqbZvTUaNy1J3BOqnR2ttrIhv9BwRmWnKeba-e6MZWKA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:55:34 GMT
age: 39481
etag: "b5118bca37feda2ada3001199dc1d80ac6d2aacc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d147ccb10bda82b153a596c3c967cd6a
ffd0763f997e71a8c1458523fc17cafe8849dfdf
1cfeb90a4ba027195f903d938d4a0aac418a1c2f0b52215ec023263f15905971
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcca8556b-b044-489f-bc74-086aad62b062.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7591
x-amzn-requestid: e179862e-f840-4e50-a9dc-09f325479b9a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgMFRZIAMFl7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e01-676a1571459f2d83488f2765;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: oB5K_ZCWWwCltMx8FQSjDdXRMzSTSyRLSYSLAooQXuCrUxadLUiWkA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 39884
etag: "ffd0763f997e71a8c1458523fc17cafe8849dfdf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c7113338bc3310b13d23ca415c177e2
2cb4edc6b161c6d2d5b47aa498ae54e677966466
3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2ihxuuXiECC4oX11t_vswhnLF0UpqDuboPLkrhpWwp-vfCR5pxGGxw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:50 GMT
age: 39585
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 498ab4412ed5cf977bc23e4e870894b0
23753fe8af09ec8ffa10eed4d201a71833885c99
036042656f15e42b4d1537c45f5b8e7190c70305fa9a69c1287c6739ad0b7122
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa07af64d-c287-4b0a-9677-9a1000422afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7334
x-amzn-requestid: a6b8b420-8394-496b-8be8-26dee52e3887
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoHJOoAMF75g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-0b38d07f518c8b3134457df2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tuKmV_nb4HVbqkhtCnZY3b33VB-bB6UxaBl6HsY_JgWesbUB8SPt-g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:09:38 GMT
age: 38637
etag: "23753fe8af09ec8ffa10eed4d201a71833885c99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 05917f7542a781275c12d43562be1507
1ea730e7e2b5a84fb0341ef9a64b141a4dd469b3
2f24492a077b583bd9dfe049c16c60b219d950712879f187ff2160214df9bd0e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Montserrat&ver=6.1.1
200 OK 972 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat&ver=6.1.1
IP
Hash b6bd0799149fc05414fa90b251408b92
f3ab174906ff870485fe6677b13149fef9e7f74e
b4b4f9ba26a53aa8b22d455666a57c72e9d73a9d50829c92b41c4b9ee26c9ca9
GET /css?family=Montserrat&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Dec 2022 08:53:35 GMT
date: Fri, 02 Dec 2022 08:53:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:34 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 217
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
200 OK 810 B IP
File type gzip compressed data, max compression\012- data
Hash 4e2cce70ad3e4d7af977e8fd7174dd68
2b792ce5ae5384215af646f87578d07412187fac
89561f90788d158977c95ab357767e899bc97b9f1b986c2f66167dc7e61d902f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2941
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:36 GMT
Last-Modified: Fri, 02 Dec 2022 08:04:35 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
cdn.datatables.net/1.10.20/css/jquery.dataTables.min.css?ver=6.1.1
200 OK 2.1 kB URL HTTP/2 cdn.datatables.net/1.10.20/css/jquery.dataTables.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (13899)
Hash f1c730cb36b02ff6f5f79035d08514d2
3cf50dcd231f50143037d15c2d26d6a3ef2ce428
2c4bdf8fbeadffec85b8aee8f45d5942836a04ea6b1c5ede435db7f607379f24
GET /1.10.20/css/jquery.dataTables.min.css?ver=6.1.1 HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:36 GMT
content-type: text/css; charset=utf-8
content-length: 2109
x-frame-options: SAMEORIGIN
last-modified: Fri, 11 Nov 2022 14:46:27 GMT
etag: "1120a3c-364c-5ed32f45a88d0-gzip"
cache-control: max-age=31536000
expires: Wed, 15 Nov 2023 21:45:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: GET
cf-cache-status: HIT
age: 1422471
accept-ranges: bytes
server: cloudflare
cf-ray: 7732d54678d5b511-OSL
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1644332086
200 OK 26 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/chaty/css/chaty-front.min.css?ver=1644332086
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (26296), with no line terminators
Hash b60e67d6024d87e77929fcf88f9fd1b8
c5d810774621d101a1b2b58a500ae6c400082b3f
82fe88ec82cd8b980192492865fd97fe1a9b3ab39b965172f4a4b1d5aa26c65e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/chaty/css/chaty-front.min.css?ver=1644332086 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:34 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:52:35 GMT
Accept-Ranges: bytes
Content-Length: 26296
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 19 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:34 GMT
Server: Apache
Last-Modified: Wed, 25 May 2022 04:02:28 GMT
Accept-Ranges: bytes
Content-Length: 18617
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4
200 OK 2.7 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.4 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:13 GMT
Accept-Ranges: bytes
Content-Length: 2731
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.1
200 OK 553 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 3b9b7c2edb106b66b43ebbd4cea15698
ddcf815daca94192ee456c82f79bcdc1e783b198
c947c502ffe6b487369d8b013afed413e4c32290f2fdfc9ff54dd74b6523357d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 553
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/
200 OK 323 kB URL HTTP/1.1 www.pvtltdregistration.com/
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (21020), with CRLF, LF line terminators
Size 323 kB (322594 bytes)
Hash 7db9e45fbdb6240388a0477ab4135e70
f3ef9dcaddd42787c746b58091d619b9b3203b01
afff225f5badb93bdf5b143e66f76ce31307ae47e4b99fff49e8e1c2bd03a688
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:33 GMT
Server: Apache
Link: <https://www.pvtltdregistration.com/wp-json/>; rel="https://api.w.org/", <https://www.pvtltdregistration.com/wp-json/wp/v2/pages/9997>; rel="alternate"; type="application/json", <https://www.pvtltdregistration.com/>; rel=shortlink
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/slick-theme.css?ver=6.1.1
200 OK 3.1 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/slick-theme.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash f9faba678c4d6dcfdde69e5b11b37a2e
81a434f94f2b1124f3232bb86f2944f82fb23ac0
7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a
GET /wp-content/plugins/rselements/assets/css/slick-theme.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 3145
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 95 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (47826)
Hash 71d925864153f0edf91037f3d31048e8
cc16a0524ac63b5ce29f703a66412224f0dd771a
c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:34 GMT
Server: Apache
Last-Modified: Wed, 16 Nov 2022 03:57:59 GMT
Accept-Ranges: bytes
Content-Length: 94889
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.1
200 OK 39 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with CRLF, LF line terminators
Hash a8b11b7cdf50a42858f7e4c15c8add70
caea77bdb93ea6c26138e05c64cf15e95d6ee142
ee2a67f581d95b0adca6ed5587e3e035559b1cec956c7f8456873f1df1150ff8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/css/font-awesome.css?ver=3.8.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 38984
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/brands.css?ver=6.1.1
200 OK 713 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/brands.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (312)
Hash a0fb612a67a875d2ea809d11011e38e9
22a9eab7886d92c8277403fc825b1e5af674ba41
781d5fd598d81afa041956c1e56f1df3e9772e3041009423a6dbf4e07fa6d416
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/css/brands.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 713
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/solid.css?ver=6.1.1
200 OK 725 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/solid.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (307)
Hash 41c227b985f4d8ce98f706d0bea979ec
082750e3f439e05a82b238ee192ccff9aad4fe4f
c4a635d3d43a496aa67b3f5c63864388bfca3da704957f2eb275e39853bba7b8
GET /wp-content/plugins/rselements/assets/css/solid.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 725
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/fonts/flaticon.css?ver=6.1.1
200 OK 3.2 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/fonts/flaticon.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 5bd8e7e0a0b8f97fbfc4d535c219b422
f4bbd1071120ef0a1154723845a1e5bb818a4f64
b4fee6843b6481c71eb2f8d8c879fe4075a4e053def6211f1f7ca733f7738353
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/fonts/flaticon.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 3221
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.1
200 OK 175 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (36639)
Size 175 kB (174960 bytes)
Hash f49fbd60a67c7d3964dc4774f8d98260
af744ce90ad17401d3b3284ad68f0af61ebf3793
99ce09873adf4a2461882f9a5fc21803534f2dbea54f2ccf74f2788502fde80f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 174960
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
200 OK 7.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format, TrueType, length 7536, version 1.0\012- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 7536
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: font/woff
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/headding-title.css?ver=6.1.1
200 OK 26 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/headding-title.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash af74de6080178f1b2afe27ccb39f50f4
1de87b03d0eb92091ba43baeb2bc84d22e460804
e1139cb86e65d741641a53db1e2c0ff07c3a3788fb4c67b892e5160fea5bcc60
GET /wp-content/plugins/rselements/assets/css/headding-title.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 25910
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/flaticon.css?ver=6.1.1
200 OK 3.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/flaticon.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash e569c6addf3781d835637a066041c592
7f48dc00e7ac5d0122e56640bd4910bc0a88bfea
0fbb0c355888a222cb88b17cd322dd0f0512ed582d8e59675fbd1eae11b38a26
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/css/flaticon.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 3478
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/plugins.css?ver=6.1.1
200 OK 249 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/plugins.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (64802), with CRLF line terminators
Size 249 kB (248740 bytes)
Hash 4b0a51d68bdfd133cba8d6df900c0212
351825d0cf55085964667f3dbac5ac38f298d692
60a026b8eebf04c0266ed5111d9ee2bd6c017eeac7e9ee39625bb5b47466ed63
GET /wp-content/themes/reobiz/assets/css/plugins.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 248740
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/custom.css?ver=6.1.1
200 OK 11 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/custom.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash f45a126f4e23d1fa2ec48424a6bdbf39
129014e266801250f3e4a5e56e4de0854bb8058a
05148cb5250f4f129890c4b6b3168710730041733fcad869f93062d1d2c7b689
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/css/custom.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 10730
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
200 OK 19 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (19004)
Hash 1867071e645872848d44e4dc23ae5c28
cb4dcf0c1aaa79c53c3b07984d4065cdb8b6ac36
ea8148c79052a55ec1596b4598795a4fa3bc979b9ecab3b0f6beb130e9b1d9e5
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.14.0 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 19050
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/default.css?ver=6.1.1
200 OK 525 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/default.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Size 525 kB (524631 bytes)
Hash 3032f861821baef425f2fa1110d9ca5d
cb97e0a1fa0d2aa3ec77d2bb34d73f332b7e31c5
29e08f343cb19cf13213b4d6b52cb59a06efb50d72a0b74423d7fe682bff6de4
GET /wp-content/themes/reobiz/assets/css/default.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 524631
Keep-Alive: timeout=5, max=298
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/responsive.css?ver=6.1.1
200 OK 122 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/responsive.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Size 122 kB (121991 bytes)
Hash fa009647b1ce2fb2b695b763bcf9bcb2
31a043b77c893b0cc48f8cd1e87175ab2b5607b3
ecc24a86e3bd356a7efdbd8b8df86291cf4de6a8320204a5137fe997a50bb566
GET /wp-content/themes/reobiz/assets/css/responsive.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 121991
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/themes/reobiz/style.css?ver=6.1.1
200 OK 20 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/style.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 23b2415b2e869c6a66c702bb19d476c6
972973af58be27829d25a3ff29c7054689470b9b
38e54d0b1ea29dbb4da194bcb627a6428fed6c256412a00eae42d696056ee9c0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/style.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 19460
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/uploads/elementor/css/post-7.css?ver=1644319818
200 OK 979 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/elementor/css/post-7.css?ver=1644319818
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (979), with no line terminators
Hash 2cd7662cc80fea108d66dacb83c2e4ed
aaf7d2a3473a5247c3350eded66c8b8ec95e6f93
f9f75c246d7a755db6372d73c1fadd7a9804ffff459c00b0f577046dc97f979a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-7.css?ver=1644319818 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 11:30:18 GMT
Accept-Ranges: bytes
Content-Length: 979
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/rsaddons.css?ver=6.1.1
200 OK 205 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/rsaddons.css?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Size 205 kB (204801 bytes)
Hash a7c91beb5e0e53dd9aba270462759d88
ef251d12c3751bcebadfad2d074676cc92b8f71a
163fac4086f6354da39819724192f1bb5d9c45d3ba6a92ae75638e7e299d3c18
GET /wp-content/plugins/rselements/assets/css/rsaddons.css?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 204801
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.5.5
200 OK 99 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.5.5
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65497)
Hash 4979c1c2a75e6a167fb7128afa274fdb
59640a523005ae1b0a3b72bc1de420510b36c718
a65107faa2223ce1ec2926b8785363a756b186b29adb0da39be530d25509dea9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.5.5 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 98820
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/uploads/elementor/css/global.css?ver=1644319818
200 OK 9.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/elementor/css/global.css?ver=1644319818
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (6697)
Hash a07c23e4f73d3f04890298ab831e650f
2ca899cf5246e6fcbcf2b6e8e4ae4354a0561706
7b64a84c219d901e94b497f2374a5eabfa89a26b3c2891c774979dea81bb66d4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/global.css?ver=1644319818 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 11:30:18 GMT
Accept-Ranges: bytes
Content-Length: 9475
Keep-Alive: timeout=5, max=297
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/uploads/elementor/css/post-9997.css?ver=1644415354
200 OK 90 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/elementor/css/post-9997.css?ver=1644415354
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (37947), with CRLF line terminators
Hash 056dc77f006a5bca999b548bccb1c237
c05ba818e20fab2d052583ebd323c31c34dc92e8
fa2086eb6a8a87c89a3c59c8c37a6d9f1d54c17154959d478f94c52c71eb1b9b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-9997.css?ver=1644415354 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Wed, 09 Feb 2022 14:02:34 GMT
Accept-Ranges: bytes
Content-Length: 90104
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: text/css
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_3.jpg
200 OK 93 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x544, components 3\012- data
Hash ea3aca27bc9b26f0a4c33029d46938e5
2625fca92940ed3bcc4f22b530a9f798cb9f0b9d
64aaf1a91becd7c30408159f804adeb03f20f4e802b871aae47c2c653ad7bfda
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/ser_3.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 92752
last-modified: Fri, 25 Mar 2022 06:21:32 GMT
etag: "623d5f6c-16a50"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
200 OK 677 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (491)
Hash 3eef8c9e589a6fd58292e79bbac4ba5d
d3ebdb629b8d9c92380b14b1676b123398f0841b
eea3d6ccda7f6503078cce9dc41176c1357af1c93a5b3625131ef7cf21c9d7c4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 677
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
200 OK 669 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (483)
Hash 9eb2d3c87feb6bb2ffa63b70532b1477
38f226335a05ab0e30497bc7419eb5e243a9e26c
37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 669
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: text/css
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/curve.png
200 OK 962 B URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/curve.png
IP
File type PNG image data, 100 x 14, 8-bit/color RGBA, non-interlaced\012- data
Hash 4dacca213d30a809c122888ef029f8d8
e26a1dfbeaa1d5ca3907f6fd12188a6f67de9557
b3a8bae0b97ccab6ed15f36455577c707c80e47e98ee5cdc9dd6cdb02c1c0711
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/curve.png HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/png
content-length: 962
last-modified: Fri, 25 Mar 2022 06:21:44 GMT
etag: "623d5f78-3c2"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/testi_icon.png
200 OK 2.9 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/testi_icon.png
IP
File type PNG image data, 171 x 76, 8-bit colormap, non-interlaced\012- data
Hash 94638c076073318803319d08c61f17ea
540ac701beefc70255248a3eac2a37425296b8fd
8db5a23a1deaf52aa5936f6792b1fccfdbfbc4ecc0a2de52325deda6cd017d9c
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/testi_icon.png HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/png
content-length: 2896
last-modified: Fri, 25 Mar 2022 06:21:42 GMT
etag: "623d5f76-b50"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_1.jpg
200 OK 74 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x544, components 3\012- data
Hash 511483f457bf15e4f2e9a5294ad6e08e
b9e5289c0733c2b843df4178e38ddb425766b4a5
bc51ac80155647231260607b365e8feccdf630f259a1b7ebeac35f2edbdf1721
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/ser_1.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 74288
last-modified: Fri, 25 Mar 2022 06:21:34 GMT
etag: "623d5f6e-12230"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_2.jpg
200 OK 78 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/ser_2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x544, components 3\012- data
Hash 07ba94482aaca7b5e24605bc7c08d6e7
abc71d7ec53a455e055f6b1623ac0ac39bdda293
07d89e5ea2b483293a48c0277de705f85ec97007f9f30890f17896fb095978eb
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/ser_2.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 78129
last-modified: Fri, 25 Mar 2022 06:21:33 GMT
etag: "623d5f6d-13131"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Wed, 18 Nov 2020 09:06:06 GMT
Accept-Ranges: bytes
Content-Length: 11224
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 90 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (65447)
Hash 17738318d61d394f1de8890d589afaec
f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 89684
Keep-Alive: timeout=5, max=296
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/chaty/js/cht-front-script.js?ver=1644332086
200 OK 79 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/chaty/js/cht-front-script.js?ver=1644332086
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1670), with CRLF line terminators
Hash 023b3688d315424aacd828d8b71e9733
9e6df13c429d8a4e4beda9b9e2e42ddf7b4524d0
484dbcb4dd673b9b91990d44bae142f1331f2398dc64ec2d3339465844687303
GET /wp-content/plugins/chaty/js/cht-front-script.js?ver=1644332086 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:52:35 GMT
Accept-Ranges: bytes
Content-Length: 79448
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
200 OK 58 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (57726)
Hash eeb705d0bdccfd645d3bbd46dd1fbab3
066def290f42ed8c00860e573cc880bd46e9ced4
d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:35 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 57912
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.5
200 OK 20 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.5
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type gzip compressed data, max compression\012- data
Hash ea4746290b5fde2a595358c505551da8
45dbff673026c6312c6eca1e0f75843369779162
b214b8fd5c3fa07a0ecc14f398e4ffc958e91de7938196034c24a24bf07fb5c2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.5.5 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 18468
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14
200 OK 58 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (12602)
Hash 11188e3c0006d83216e161ae1d59c86e
158c7818f4d65b85bd613b35f81a5ff62972522b
6540abd4143b1bce02006ebb345dd9a4c6bb18e5580c529361b6e3e1b7b8522c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 57704
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: text/css
www.pvtltdregistration.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 6.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Wed, 25 May 2022 04:02:28 GMT
Accept-Ranges: bytes
Content-Length: 6475
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 18 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash e495a4709e3eae31c67f8263f25d2d39
d43ba6a092e4823a71f3bff75d5ed279a481636b
1c1fef6e6b4f9832603850b9b6562e74d9a6a3700ba836efe88facc577121e8b
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 17823
Keep-Alive: timeout=5, max=295
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
200 OK 9.7 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with very long lines (9720), with no line terminators
Hash cfb428c02811f0cbe515d5f3dca61de6
e95f8696fbe29a706e66ccf582b36d9bd650ab9f
679e44f9b4bbbc2ad0c4000c1413fd3a88627d83f1cba8ebdac26f81bc7edb78
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.4 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:13 GMT
Accept-Ranges: bytes
Content-Length: 9720
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.1
200 OK 12 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (11754), with no line terminators
Hash d554f24f69af8b9702c5476ca25970a0
d29deaf5146d2b19754e5ae0146340266e5945f2
c6032db65e05ab35fa32720f43a727354dc9b05daf7caa54f602f1214c24ac04
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/js/master-popups-libs.min.js?ver=3.8.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 11754
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 134383
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 3f373bff74d65397a353587fea05e82f
f76493c055af0b08e83dff16c4252c581c165bcd
417bbf8a2b8cc3ee58d9fa4db4b14d1849a4787a606df3c6d1f2376d96558b92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2901
Cache-Control: max-age=112777
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Etag: "6388c745-117"
Expires: Sat, 03 Dec 2022 16:13:14 GMT
Last-Modified: Thu, 01 Dec 2022 15:24:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 134687
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17368, version 1.0\012- data
Hash abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9
GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 07:01:24 GMT
expires: Wed, 29 Nov 2023 07:01:24 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 265933
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 134381
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 134687
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:28:50 GMT
expires: Thu, 30 Nov 2023 19:28:50 GMT
cache-control: public, max-age=31536000
age: 134687
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Dec 2022 12:29:21 GMT
expires: Fri, 01 Dec 2023 12:29:21 GMT
cache-control: public, max-age=31536000
age: 73456
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7824, version 1.0\012- data
Hash af4d371a10271dafeb343f1eace762bc
6d11d743bc3cfb169d70bc86450f18351dc1a905
60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2
GET /s/poppins/v20/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 20:21:43 GMT
expires: Thu, 30 Nov 2023 20:21:43 GMT
cache-control: public, max-age=31536000
age: 131514
last-modified: Wed, 27 Apr 2022 16:52:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14
200 OK 129 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (45108)
Size 129 kB (128668 bytes)
Hash 13c0e15e77282cb9a81d7ab1f7f6b956
a19812785e6871612d7e936b5d2889d10149637b
82c6e9fccae16e121eb4fd7800a79bca62d9bcfb760ca55e26bb4b441d48cb67
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.14 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 128668
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14
200 OK 385 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (64288)
Size 385 kB (385173 bytes)
Hash e1127efba608518ff2ac4976e3706232
88214af265c867a3955d6b96619c6f614cb311fa
b893d1b1e1836ef5731a8e15b1a4e1536d147dfd9c9815414347a0c7db199119
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.14 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 385173
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15752, version 1.0\012- data
Hash b20371a6daf29d4a1f2e85dbbf40fb20
0355a01c1ccb45cb728e7e07c41c8ebf456f70bb
7e262106f82cc52663e403f5b73795bbeab9ca0630c33c03579354fbcd4fae1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:42:34 GMT
expires: Thu, 30 Nov 2023 19:42:34 GMT
cache-control: public, max-age=31536000
age: 133863
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.plugin.js?ver=201513434
200 OK 12 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.plugin.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 5089653f43d0a3970aae2bed9a31666a
f3fa11db281157834693b61afb550b68908758b4
3ebcd7d59c2e596630fee4b6f1500f960e63f514a6816f11031c2d484d1f2683
GET /wp-content/plugins/rselements/assets/js/jquery.plugin.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 11513
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: application/javascript
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 134362
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.cookie.js?ver=201513434
200 OK 3.1 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.cookie.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 0f1f6cd6e0036897019b376d38593403
498b29de6e170fffc8535183b7d6550490f0a159
8c0301b3dba5061632d7321cd8bb7bd527f48288d5cb15ff614ea0c1dcc1ad69
GET /wp-content/plugins/rselements/assets/js/jquery.cookie.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 3140
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.1
200 OK 65 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (31983)
Hash 2694a11145398f7ded0a0c7a1773a4a0
f73586a96d1cc2005af95f66c63d9788a8ea786b
2517527e946e9d7399a81f0ce0ecf57f15a2c7942707b21c15cf9513b04cf366
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/js/master-popups.min.js?ver=3.8.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 64818
Keep-Alive: timeout=5, max=294
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/popper.min.js?ver=201513434
200 OK 21 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/popper.min.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (20989)
Hash 233ab8fa66b2f425f9f6f708fd5383bf
b9fbf7f7068eff1904776b4725718bf33e0623a5
67bbcec2522f3b5d3e8a265e3057004fe9c9961bdce0646dcbc9c32bf06e5aeb
GET /wp-content/plugins/rselements/assets/js/popper.min.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 21123
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/service_bg.jpg
200 OK 20 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/service_bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x847, components 3\012- data
Hash b3cc6b60900d6639356851525c9f8cd3
1d7dd3643571a5fbd0dcdd1284feb69faac756ce
da81440938571065586ac9c5a38702c4e8af9b4034c53e17e7fd315d6d91e117
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/service_bg.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 19872
last-modified: Fri, 25 Mar 2022 06:21:50 GMT
etag: "623d5f7e-4da0"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/call_to_action_bg.jpg
200 OK 34 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/call_to_action_bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x770, components 3\012- data
Hash 525699422bb9a3060a4e340f543b1e4a
5a39e8c51132dce16b19b4f0c9ca30b109e3c334
f2ae3a66e8b681bfbb49984f43768c061dc96c99447443c606fefc4627560ea3
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/call_to_action_bg.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 34145
last-modified: Fri, 25 Mar 2022 06:21:49 GMT
etag: "623d5f7d-8561"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/portfolio_bg.jpg
200 OK 18 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/portfolio_bg.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x500, components 3\012- data
Hash ad46ddfc8b876c7d96ebbb5e83777cd5
224019cc6264265e5096fb83ed6c3ba1e6b88c07
3d8d6adcee2a701b78652a2d7883c53570de4e24e554fbcde93720bf699ed9c9
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/portfolio_bg.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 18238
last-modified: Fri, 25 Mar 2022 06:21:43 GMT
etag: "623d5f77-473e"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.counterup.min.js?ver=201513434
200 OK 1.1 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jquery.counterup.min.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (917)
Hash ef36cca760bf1cd76cfcd0e4dc10cef1
ef38469f60d58850fe55c4de2ec7e289a2415d71
26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/jquery.counterup.min.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 1067
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/datatables.min.js?ver=201513434
200 OK 85 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/datatables.min.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (624)
Hash c227df9ba95c8350d1e447a2aebe3f85
f0934e1189da3d96aee9422891860b08ee2cf7a2
53b04c48be94528907178560980a431336181028b16c15c5f8e061d2c2a8f66e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/datatables.min.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 85089
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/time-circle.js?ver=201513434
200 OK 35 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/time-circle.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 6eb8f7103c52ec9dd340141739bfe964
37090f9c6e5b9ac25e391d399e7a3efb2a38c1ad
0478b05d009dfeb2f68138e75695dbd3db2abf168a20ebb145ee111edbdd19c3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/time-circle.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 34990
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/subscribe_b.jpg
200 OK 112 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/subscribe_b.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x533, components 3\012- data
Size 112 kB (112542 bytes)
Hash 71c1adffa9567ab1e25ca17de8952209
b8b1da099388f25e8ef2964c6702ad1d593af5ef
20bc711382f9ccdd4dd622f1ea9ec6320630e10ba60a2044dcad1f1eddebfa03
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/subscribe_b.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 112542
last-modified: Fri, 25 Mar 2022 06:21:43 GMT
etag: "623d5f77-1b79e"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/headding-title.js?ver=201513434
200 OK 5.7 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/headding-title.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 0527840d7e4e6c5c6e3cc1dde3f71932
8602f3d8664dba2140188157dc9cf20d1aea9341
50437acd1ea1a1a12278586b3701f43cfc7e2f5be1277d89447f0307f78f2c10
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/headding-title.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 5719
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/tilt.jquery.min.js?ver=201513434
200 OK 5.7 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/tilt.jquery.min.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (5640), with CRLF line terminators
Hash f676d66d07a256345597fd6a304b24aa
db7c0c82fd75e1b0e074d953e53bfe18bce0a4b4
23c4a6bfbfb7603c1fb5599d9704f4074698159959895745f215af764b6f73ef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/tilt.jquery.min.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 5666
Keep-Alive: timeout=5, max=293
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jQuery-plugin-progressbar.js?ver=201513434
200 OK 5.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/jQuery-plugin-progressbar.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash b512d50a2e4e354159cb02c7d9ca9065
bef474e847fafb6a805d42d707b3b4a65d999892
6036f29658f9be31ac4b4bdfa5d1aed1602dec83977846b230862e0fb2056e49
GET /wp-content/plugins/rselements/assets/js/jQuery-plugin-progressbar.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 5543
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 5.6 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (5477)
Hash 3a56752b736635bf69cb069b8818cbfd
42e0951fe74bb3f56a30f51291823bcd4a84d76e
ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Sat, 13 Jun 2020 18:53:27 GMT
Accept-Ranges: bytes
Content-Length: 5629
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/custom.js?ver=201513434
200 OK 2.8 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/js/custom.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 391527d42ffae85ad95ddfa0739bf927
def2a32c6ac29ea6fc7474b7bb9b20475298447a
2dbe62e10ecf2d74c7258a78758575b7e9482dc805870eb1a71514e3400f3f93
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/rselements/assets/js/custom.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 2752
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/classie.js?ver=201513434
200 OK 1.8 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/classie.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash a9df1cfb76ce492afd9d13f3320272fd
782b9564f015a2ec7bdf9c89e238fab9b44bd587
717ad22aa426d024f6c9942949b49d9a20f4239b94dfee34f94c96d8778f2144
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/classie.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 1835
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/theia-sticky-sidebar.js?ver=20151215
200 OK 16 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/theia-sticky-sidebar.js?ver=20151215
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text
Hash 5738b8cc21ba524964d9403f24ea0130
bca120481bbd7050ac4bda741b5fec7d9653cdb0
41f806a19a20885a156ceb760f01b4fddc9e037b0f94dbbdaf33c53077f5fc08
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/theia-sticky-sidebar.js?ver=20151215 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 16324
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/pointer.js?ver=20151215
200 OK 2.8 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/pointer.js?ver=20151215
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 68d6267e60c6dd59c0de2a3fe8fc9be1
301d0ba2176f2cce66b4e26341d415f5ca14b753
67a5f4d1a32209078d1af8b8b1ee2c97213f1d748891447451e4eedb50c8912e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/pointer.js?ver=20151215 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 2761
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/fixed-menu.js?ver=201513434
200 OK 1.7 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/fixed-menu.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with CRLF line terminators
Hash 14c7a03023644f90a7b873649e91ff1a
b4d976b8870f31b91488c55e5c1ada8f17f4aaec
9480e679e3e52ca1af37279d8359854fa199070fd9ad606369e0fa210ebf11ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/fixed-menu.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 1670
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/mobilemenu.js?ver=201513434
200 OK 2.9 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/mobilemenu.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type gzip compressed data, max compression\012- data
Hash 86e76e9e7839c904882acda433fc4506
093fbc4b0e0e020a4efae2b08879ddc8b2971e50
0f1df192623446094ec9f9c32b1b714112164e3f2dffa8e534a5650e41a0c5dc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/mobilemenu.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 2058
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/plugins.js?ver=20151215
200 OK 399 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/plugins.js?ver=20151215
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type HTML document, ASCII text, with very long lines (48664), with CRLF line terminators
Size 399 kB (399281 bytes)
Hash ca290fd0b3299a0ccd54d59b81dc99e1
cfb73969706e9dc49f93d91968f50ecd6da896e0
9ea16af03cb552ce3d7013964002d8f41d83e6b6f9b425e3a9f74dfa41b44bba
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/plugins.js?ver=20151215 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 399281
Keep-Alive: timeout=5, max=292
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/mobilemenu_single.js?ver=201513434
200 OK 2.8 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/mobilemenu_single.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type gzip compressed data, max compression\012- data
Hash cdf2bcbd8c641a7a0fc4448187aa76b8
657c547992b5e67a0b8efa08f6dd58f140d8d734
10d3aa55237347226f13dd741abe97e035c42e328a27bdbb1cfd7e3a98fcf5e4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/mobilemenu_single.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 2128
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/main.js?ver=201513434
200 OK 20 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/js/main.js?ver=201513434
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
Hash 869c73b9adfb6d13fc0ae9f5b148f387
0725dbc045b3c509fe165dec57879ad0ca0707b2
9738c08b1247fd96a6ba550a35771edc9843775e4bce671c0be97c21323008a8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/js/main.js?ver=201513434 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 19846
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.6
200 OK 6.2 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.6
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (6210), with no line terminators
Hash b739d72c47c93702aef206eb58857289
fdc2a712672c64f317df41073aec28d7b01a5e6e
dcbe862273a5d7cb61ffaa1eda7e0a1ecb466ca5e08a592fae3e6d1824960293
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/mailchimp-for-wp/assets/js/forms.js?ver=4.8.6 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:21 GMT
Accept-Ranges: bytes
Content-Length: 6210
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
200 OK 279 B IP
Hash 3f373bff74d65397a353587fea05e82f
f76493c055af0b08e83dff16c4252c581c165bcd
417bbf8a2b8cc3ee58d9fa4db4b14d1849a4787a606df3c6d1f2376d96558b92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2902
Cache-Control: max-age=112777
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 08:53:38 GMT
Etag: "6388c745-117"
Expires: Sat, 03 Dec 2022 16:13:15 GMT
Last-Modified: Thu, 01 Dec 2022 15:24:53 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 279
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.5
200 OK 4.9 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.5
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (4866)
Hash 55b7178cab7f8f99756cd6d19d5c05d9
ea2ed07d39fc809e44b217c06b26eb1dfe7cb8ec
b213c638a51350698fdb574b4ea67513700b4097561c2d9d4265e33e4a7ad3ac
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.5.5 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 4905
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.5
200 OK 14 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.5
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (14196)
Hash 7082c0b7b9bc4b526d761d9eb8d186aa
102320735cdb3cb7064480eb22d5b6370d6070f5
c5be3d8fe17df41d2d7568f97e68fc0feded439295a3a5ffa336b9c9b13b0fd1
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.5.5 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:36 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 14235
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
200 OK 12 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (12198), with no line terminators
Hash 3819c3569da71daec283a75483735f7e
ecd40a5cc6f0b76200c454ca880210dc301cfab8
214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 12198
Keep-Alive: timeout=5, max=291
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
200 OK 21 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 034bd11ecaf6fb9240d905245e42e202
ff136c394ed95badfc0107fb98a890dcff642828
ca7154cdda62b535ceaba9ad2a2b2217ff49de94c069a2c4e89733f3f06b3651
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 21440
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 19 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (18798)
Hash f88d5720bb454ed5d204cbdb56901f6b
f1952292fde4b15936e9aac16b2b9896684db95b
726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 18833
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.5
200 OK 37 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.5
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (36850)
Hash 567da8315d9d44dfe8754a3f24ae45af
4b7fb545c67401bc842e8d32233a49a3debee5ff
e199780cea4aee9ba66715ba215db0b3f9e2460c1302162e13aa0937021d9eaa
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.5.5 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 36889
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-includes/js/wp-util.min.js?ver=6.1.1
200 OK 1.4 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-includes/js/wp-util.min.js?ver=6.1.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (1391)
Hash 19d386c9004e54941c1cc61d357efa5d
0a77594006c8d86fdcc0adbc2b9aecaef3869586
3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
GET /wp-includes/js/wp-util.min.js?ver=6.1.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Wed, 02 Nov 2022 03:55:58 GMT
Accept-Ranges: bytes
Content-Length: 1426
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.2.1
200 OK 754 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.2.1
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type ASCII text, with very long lines (754), with no line terminators
Hash afb55c29bdbcfc262d9fa56743572cad
d4b6cb9df2b1b5477cd968fb05cf5faa1d13d6bf
c30dab20b677f2b13f42a4a04385a3c6d380fa023a4a1c32f45f2996e152bfba
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.7.2.1 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:59:50 GMT
Accept-Ranges: bytes
Content-Length: 754
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: application/javascript
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/fonts/Flaticon.woff
200 OK 9.4 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/fonts/Flaticon.woff
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format, TrueType, length 9372, version 0.0\012- data
Hash 806b9758099adc17111df4af6090acc0
8b051227c5f742c9342e17fd7c20c34d4b51a9a8
ab311b128da32956919dcb0bba01e32459ef655647251bd84561845b5889b20c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/fonts/Flaticon.woff HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/flaticon.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 9372
Keep-Alive: timeout=5, max=290
Connection: Keep-Alive
Content-Type: font/woff
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/plugins.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: font/woff2
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
200 OK 13 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261\012- data
Hash f0f8230116992e521526097a28f54066
0447c6b10bbf73f97b23dcfd6e6a48510822cb6e
8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 13276
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: font/woff2
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/webfonts/fa-brands-400.woff2
200 OK 77 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/webfonts/fa-brands-400.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data
Hash f7307680c7fe85959f3ecf122493ea7d
fce0da592a3e536d6d5df5b50cb513398d8c5161
43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/reobiz/assets/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/plugins.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 76764
Keep-Alive: timeout=5, max=287
Connection: Keep-Alive
Content-Type: font/woff2
www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
200 OK 78 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261\012- data
Hash e8a427e15cc502bef99cfd722b37ea98
a9922842a120a7f1eaced667480c5e185a106d69
d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:17 GMT
Accept-Ranges: bytes
Content-Length: 78196
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: font/woff2
www.pvtltdregistration.com/wp-content/uploads/2022/02/logo.png
200 OK 38 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/2022/02/logo.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 760 x 233, 8-bit/color RGBA, non-interlaced\012- data
Hash c9f25ebea2c54d5e58ffd81ab03fef1b
521e04278fb233da08d3e6ef88761678dc1acc3f
049d3051b778ffc954135f1252e2f1838aba5dbccc1967f0e76fddaf5eeb614b
GET /wp-content/uploads/2022/02/logo.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 08:02:39 GMT
Accept-Ranges: bytes
Content-Length: 38098
Keep-Alive: timeout=5, max=289
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/assets/dummy.png
200 OK 68 B URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 68
Keep-Alive: timeout=5, max=287
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/plugins/rselements/widgets/testimonial-slider//img/5.png
200 OK 1.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/widgets/testimonial-slider//img/5.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 160 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash e4bf469d1d1813fdda9103acd794f549
9ccc508c63bc0b55feb93c2ee37c60cf93329a95
712b978c467d435ca10e2118ad96f5653043c6e08cef32b14b8ff88b71ce8a04
GET /wp-content/plugins/rselements/widgets/testimonial-slider//img/5.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 1510
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/plugins/rselements/widgets/testimonial-slider//img/4.5.png
200 OK 1.6 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/widgets/testimonial-slider//img/4.5.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 160 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash c1143af996e369b8aca1ebbe9c258eee
d5645138099bbcb63784a5691e2ad5997d9fcbc8
f3273324511085d6d277cd8ae2e4bbfd90b16a13b67765c88f4ac9c921a74134
GET /wp-content/plugins/rselements/widgets/testimonial-slider//img/4.5.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 1612
Keep-Alive: timeout=5, max=286
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/uploads/2022/02/footer-logo.png
200 OK 61 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/2022/02/footer-logo.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 1086 x 333, 8-bit/color RGBA, non-interlaced\012- data
Hash 94da2a0ce44b35182062d97d7f5231c4
d05e70987845fe1d2ca6f64bbc19e670ef5e2353
b4f0e11a44ce9ad58a63a755a4737c03ade87903e58ed75a783e075acf0e4ebd
GET /wp-content/uploads/2022/02/footer-logo.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:10:00 GMT
Accept-Ranges: bytes
Content-Length: 60910
Keep-Alive: timeout=5, max=287
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/uploads/2020/10/about_right.png
200 OK 508 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/2020/10/about_right.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 601 x 604, 8-bit/color RGBA, non-interlaced\012- data
Size 508 kB (508083 bytes)
Hash e36efd4096a047a5bae0ecce824577d7
3f13003f8f59438c99a24213131d25c2febd2475
c616e8983b59b20d16af2b9ea6a4e73aea818e7dc687780b5779b584bf410018
GET /wp-content/uploads/2020/10/about_right.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:58:43 GMT
Accept-Ranges: bytes
Content-Length: 508083
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/themes/reobiz/assets/images/close.png
200 OK 1.2 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/themes/reobiz/assets/images/close.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 137d35308496a72e4ee46f5ef35c8e89
a6f5ec87c481361dd36a3aade06aa9687c25779e
298ae8524ad2514454b4f4da804ce7d910cef23623fb945b89a1ec4d8c5df2bd
GET /wp-content/themes/reobiz/assets/images/close.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/themes/reobiz/assets/css/default.css?ver=6.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:41:58 GMT
Accept-Ranges: bytes
Content-Length: 1206
Keep-Alive: timeout=5, max=288
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/uploads/2020/05/logooff.png
200 OK 3.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/2020/05/logooff.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 176 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash b1b9b04e725f4a25e0675303cb5b499d
bee2906c34c8be7874df5bb23b66613805228022
dcbe42e5d12bafef54037f14146abbf8e14619b3587e80de834ad163c157d030
GET /wp-content/uploads/2020/05/logooff.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:50:04 GMT
Accept-Ranges: bytes
Content-Length: 3506
Keep-Alive: timeout=5, max=286
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/ajax-loader.gif
200 OK 4.2 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/ajax-loader.gif
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type GIF image data, version 89a, 32 x 32\012- data
Hash c5cd7f5300576ab4c88202b42f6ded62
7a1aa43614396382bb15e5fde574d9cdcd21698f
e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
GET /wp-content/plugins/rselements/assets/css/ajax-loader.gif HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/rselements/assets/css/slick-theme.css?ver=6.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:30 GMT
Accept-Ranges: bytes
Content-Length: 4178
Keep-Alive: timeout=5, max=285
Connection: Keep-Alive
Content-Type: image/gif
www.pvtltdregistration.com/wp-content/uploads/2022/02/favicon.png
200 OK 56 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/uploads/2022/02/favicon.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 513 x 412, 8-bit/color RGBA, non-interlaced\012- data
Hash 84abbd29a550ba7865e1bb2340e08abf
9adb5895336de61d5e8fbe45a822f0921a18e76f
61027a2591d2958d83c3c9e13600d710539d71e14275473bd664d3e644f84d5f
GET /wp-content/uploads/2022/02/favicon.png HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 08:03:02 GMT
Accept-Ranges: bytes
Content-Length: 55581
Keep-Alive: timeout=5, max=286
Connection: Keep-Alive
Content-Type: image/png
www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/assets/loader.gif
200 OK 2.5 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/assets/loader.gif
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type GIF image data, version 89a, 24 x 24\012- data
Hash 4b3afb84b2b71ef56df09997a350bd04
accdac8a7abeab0e21c49539aad0a973addb28ef
9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645
GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.14
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:43:39 GMT
Accept-Ranges: bytes
Content-Length: 2545
Keep-Alive: timeout=5, max=287
Connection: Keep-Alive
Content-Type: image/gif
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 14:42:14 GMT
expires: Sun, 26 Nov 2023 14:42:14 GMT
cache-control: public, max-age=31536000
age: 497485
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pvtltdregistration.com/wp-content/uploads/2020/10/dot_ball.png
200 OK 8.9 kB URL HTTP/1.1 pvtltdregistration.com/wp-content/uploads/2020/10/dot_ball.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 199 x 204, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ed5c8e61e1bbec9221d9cf702592f1c
97fb2798b0687cab83173aabb624c5811d2768a2
02fdc2aa005edb9b5944c8b4cb264503e326b88f7fa4961bc97250c14c3b47cc
GET /wp-content/uploads/2020/10/dot_ball.png HTTP/1.1
Host: pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:38 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:58:39 GMT
Accept-Ranges: bytes
Content-Length: 8902
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: image/png
pvtltdregistration.com/wp-content/uploads/2020/10/home_111.jpg
200 OK 54 kB URL HTTP/1.1 pvtltdregistration.com/wp-content/uploads/2020/10/home_111.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3\012- data
Hash 2b67142d192cb387832b4e050ba7e5c9
c6ace229090fc8c705447c94ddba1b6b79006855
1d3a03411a6ed1e719f8b296f0634c78ea3300b4525b9d2f54a4ec0fe136ad14
GET /wp-content/uploads/2020/10/home_111.jpg HTTP/1.1
Host: pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:37 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:59:19 GMT
Accept-Ranges: bytes
Content-Length: 53587
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: image/jpeg
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 309644
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15528, version 1.0\012- data
Hash 595fe3fc0b85f3cc9ef5aed2d519abc5
96e76de44987e9dec2f97f1e5eb7a18c738daf5d
747d5a0865fe76129cc17fe70097fd5b1db733ed3bbfa0210a8505d80c14ab5a
GET /s/robotocondensed/v25/ieVi2ZhZI2eCN5jzbjEETS9weq8-33mZGCQYbw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15528
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 23:00:05 GMT
expires: Wed, 29 Nov 2023 23:00:05 GMT
cache-control: public, max-age=31536000
age: 208414
last-modified: Tue, 19 Apr 2022 18:53:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pvtltdregistration.com/wp-content/plugins/master-popups/assets/images/image2-800.jpg
200 OK 52 kB URL HTTP/1.1 pvtltdregistration.com/wp-content/plugins/master-popups/assets/images/image2-800.jpg
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x445, components 3\012- data
Hash b51c078d8dc35f260f3f481e9e2b2c36
ae053f797b5cc8de237baa0ae0374c44915940ce
4c73985ffc5681f1f91536c350923e4a953efc6d4fa2a5a04f92cd521101bfc0
GET /wp-content/plugins/master-popups/assets/images/image2-800.jpg HTTP/1.1
Host: pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:38 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 51971
Keep-Alive: timeout=5, max=299
Connection: Keep-Alive
Content-Type: image/jpeg
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/fonts/FlaticonClose.woff
200 OK 1.9 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/fonts/FlaticonClose.woff
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format, TrueType, length 1924, version 0.0\012- data
Hash ca6af7524496f1d7056fe804554e7a60
cfa17c18afe9ca67379d63d41163f93a716946f1
65a7fbf23d7a78353c829da1bbfab852295871244c613d823fd53ba390e1b08d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/fonts/FlaticonClose.woff HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/master-popups.min.css?ver=3.8.1
Cookie: chaty_settings=[{"k":"cta_widget_status","v":"2022-12-02T08:53:37.365Z"}]
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:38 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 1924
Keep-Alive: timeout=5, max=285
Connection: Keep-Alive
Content-Type: font/woff
www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/1.1 www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/master-popups/assets/public/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/wp-content/plugins/master-popups/assets/public/css/mpp-fontface-fontawesome.css?ver=3.8.1
Cookie: chaty_settings=[{"k":"cta_widget_status","v":"2022-12-02T08:53:37.365Z"}]
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:38 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 14:43:48 GMT
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=286
Connection: Keep-Alive
Content-Type: font/woff2
pvtltdregistration.com/wp-content/uploads/2020/10/shap_man.png
200 OK 600 kB URL HTTP/1.1 pvtltdregistration.com/wp-content/uploads/2020/10/shap_man.png
IP
ASN #394695 PUBLIC-DOMAIN-REGISTRY
File type PNG image data, 649 x 747, 8-bit/color RGBA, non-interlaced\012- data
Size 600 kB (599781 bytes)
Hash 75c141e5b93cca2d52536e16cee82d40
5404c1a3cf9965e6fb4a52d1f02271d362cec62f
67829a44f7fc58d98143d6e4298f062b37bd2f3dfd2e486d58af8cb4a437ec70
GET /wp-content/uploads/2020/10/shap_man.png HTTP/1.1
Host: pvtltdregistration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:38 GMT
Server: Apache
Last-Modified: Tue, 08 Feb 2022 06:58:37 GMT
Accept-Ranges: bytes
Content-Length: 599781
Keep-Alive: timeout=5, max=300
Connection: Keep-Alive
Content-Type: image/png
keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/footer11.jpg
200 OK 468 kB URL HTTP/2 keenitsolutions.com/products/wordpress/reobiz/wp-content/uploads/2020/10/footer11.jpg
IP
File type PNG image data, 558 x 718, 8-bit/color RGBA, non-interlaced\012- data
Size 468 kB (468520 bytes)
Hash 454f8796a8c1344b2354f4c3584e648f
aea1b40f1343b7f5ac06d164bc30a51e31833714
7a91eb3ee655f4314ee1ad4cb57381e60373277a8f98ef01db68639f83c522f2
GET /products/wordpress/reobiz/wp-content/uploads/2020/10/footer11.jpg HTTP/1.1
Host: keenitsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 08:53:37 GMT
content-type: image/jpeg
content-length: 37550
last-modified: Fri, 25 Mar 2022 06:21:16 GMT
etag: "623d5f5c-92ae"
expires: Sat, 02 Dec 2023 08:53:37 GMT
cache-control: max-age=31536000
host-header: 8441280b0c35cbc1147f8ba998a563a7
x-proxy-cache-info: DT:1
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
200 OK 54 kB URL HTTP/2 cdn.jsdelivr.net/emojione/2.2.7/lib/js/emojione.min.js
IP
File type ASCII text, with very long lines (32014)
Hash ea53ffc3c20542881a2735a62c0426d7
365e24ffd4a54e4c019a47c94204ad90a8538eb5
e4f801f6cd7462489966e441ff53795823a607656497f9d0ce8cbfc08f6c7448
GET /emojione/2.2.7/lib/js/emojione.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
etag: W/"49dda-cp9vjKV4fYl0Ow7X6yf9dkBr+YU"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 02 Dec 2022 08:53:41 GMT
age: 22117578
x-served-by: cache-fra19156-FRA, cache-bma1630-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 53889
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 5f1605274ac485609ce6e01764f8f8e7
55a31b94c50f57c2ff1aaff5dd2bcf714b121dd5
df6697bfad883d3accb951558fd2ae0b6b3ede91c611d23559baf95a6294c1ee
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 08:53:41 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "6038A82C7B2AEA5974E9962C19A85E5B4C9F2F6E"
Expires: Fri, 02 Dec 2022 20:00:00 GMT
Last-Modified: Fri, 02 Dec 2022 08:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 142
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7732d5677ef91c02-OSL
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
200 OK 3.5 kB URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-main.js
IP
File type ASCII text, with no line terminators
Hash b686344cefd533be3cee310d48025d67
54589b062b2b4af87c47b450f454d3ff98b3a121
0d3897f73ccbfc1dc58cc68c3e1f8dc783dbede30bd45b3ea7403e017bc122ae
GET /_s/v4/app/637ddf31c8f/js/twk-main.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"da5bb1dc647470204df0e49f5afac2de"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ed8140b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/5a7b8b8ed7591465c70778af/default
200 OK 0 B URL HTTP/2 embed.tawk.to/5a7b8b8ed7591465c70778af/default
IP
GET /5a7b8b8ed7591465c70778af/default HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:38 GMT
content-type: application/x-javascript
access-control-allow-origin: *
cache-control: public, max-age=7200, s-maxage=3600
etag: W/"stable-v4-637ddf31c8f"
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d54f3a1f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-app.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-app.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-app.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"e736e189edb5d0d9d5b8e7f23dd9114a"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ee8340b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-vendor.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-vendor.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"7dcb496e4882926f93f2e73fa87062c0"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ed8160b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-common.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-common.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"bde99510bdf9ab7bbc9ce82519a19a36"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ed8190b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-32507910.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:41 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"af764270cff49e4f88710a5824f1af0a"
age: 777353
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d5664ed50b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/css/bubble-widget.css
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/css/bubble-widget.css
IP
GET /_s/v4/app/637ddf31c8f/css/bubble-widget.css HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:41 GMT
content-type: text/css
cache-control: public, max-age=2592000, immutable
cf-bgj: minify
cf-polished: origSize=13594
access-control-allow-origin: *
age: 777353
etag: W/"ce7913b80c763449b3895d46419f7a6b"
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
strict-transport-security: max-age=0; includeSubDomains; preload
x-cache-status: HIT
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d566df6d0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-vendors.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"70dac54eca3bb2143032bc4db3237623"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ed8170b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-4fe9d5dd.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-chunk-4fe9d5dd.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-chunk-4fe9d5dd.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:41 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"5f434bdd806571a4e1b385bee9316ff6"
age: 777354
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: HIT
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d5663eca0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-runtime.js
200 OK 0 B URL HTTP/2 embed.tawk.to/_s/v4/app/637ddf31c8f/js/twk-runtime.js
IP
GET /_s/v4/app/637ddf31c8f/js/twk-runtime.js HTTP/1.1
Host: embed.tawk.to
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pvtltdregistration.com
Connection: keep-alive
Referer: https://www.pvtltdregistration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 08:53:40 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 08:52:37 GMT
etag: W/"9075c2f5460b2832318d3c7217cc68cb"
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
x-cache-status: HIT
strict-transport-security: max-age=0; includeSubDomains; preload
cf-cache-status: MISS
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7732d55ed81a0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
119.18.52.194
44.237.93.5
93.184.220.29
104.22.50.93
23.36.77.32